Connecting to a Remote EJB Module Through
a Firewall

To deploy and run an application client that connects to an
EJB module on a GlassFish Server instance that is behind a firewall,
you must set ORB Virtual Address Agent Implementation (ORBVAA) options.
Use the asadmin create-jvm-options command as follows:

Set the ORBVAAHost and ORBVAAPort options
to the host and port of the public address. The ORBUserConfigurators option tells the ORB to create an instance of the VirtualAddressAgentImpl class and invoke the configure method
on the resulting object, which must implement the com.sun.corba.ee.spi.orb.ORBConfigurator interface. The ORBUserConfigurators value
doesn't matter. Together, these options create an ORB that in turn
creates Object references (the underlying implementation
of remote EJB references) containing the public address, while the
ORB listens on the private address specified for the IIOP port in
the GlassFish Server configuration.